Search Engine
Full-text search across titles, headings, tags, descriptions, and body content.
Shortcut: Ctrl + K
Results
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...es 1 ensure tampered artifacts are detected before or during execution 2 ensure secure mode is fail-closed by default 3 protect payload confidentiality and integrity at rest 4 reduce effectiveness of dynamic analysis debugging 5 detect runtime instruction tamp...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...y enforced mutant signs and verifies artifacts using ed25519-based signing flow secure mode behavior 1 secure mode is default 2 signer-auth is optional and can be explicitly enforced with --signer-auth 3 without --signer-auth secure mode keeps runtime hardenin...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...urrent baseline implemented now 1 signed artifact verification with trusted-key secure path 2 tamper response policy warn delay terminate 3 protection profiles minimal standard paranoid 4 anti-debug checks in runner pre-decode and pre-execution 5 sandbox check...
Bytecode, VM, polymorphism, and execution internals.
...gth int64 password string offset int64 uint8 error both functions call security securexor before decoding length is the total byte length of the main function s instruction stream used as part of the xor key derivation offset is the absolute byte position of t...
Big-picture explanations, quick reference material, and definitive orientation docs.
...tion decryption utilities in storage use path additional primitives available 1 secureglobal 2 securestack 3 secureconstantpool these wrappers exist and are useful but are not the only active runtime mechanism 7 why confidence matters single signals can be noi...
BINARY ARTIFACT SECURITY DEEP DIVE
Bytecode, VM, polymorphism, and execution internals.
...e signature decision matrix the runner behavior is controlled by two switches 1 securemode derived from cli mode flags 2 enforcesignerauth derived from --signer-auth --no-signer-auth behavior 1 securemode true enforcesignerauth true - runs trusted-key signatur...
Bytecode, VM, polymorphism, and execution internals.
...deep-dive guides for the graph database runtime integration structured data and networking - all aoiflux forensic libraries upgraded to their latest releases new language capabilities - higher-order collection functions map filter reduce each sort_by backed by...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...rity signatures go l98 runner runner go runner runner go l27 mode-driven path --secure --compat --dev security security_test go security security_test go l101 runner runner_test go runner runner_test go l13 github workflows security-profile yml github workflow...
Editor integration, implementation workflow, and operational runbooks.
...t path 3 keep default path performance-safe suggested files 1 vm vm go 2 object secure_memory go 3 mutil util go 6 verification checklist 1 no doc claims unsupported cli flags 2 probe gate semantics remain explicit everywhere 3 runner and builtin probe scope d...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
...d catalog of every builtin generated from the metadata above - deep-dive guides secure networking secure_networking md graph database graph_database md runtime integration runtime_integration md structured data structured_data md language features mutant suppo...
Big-picture explanations, quick reference material, and definitive orientation docs.
...red data json encoding compression higher-order collection functions filesystem networking sockets tls http graph modeling cryptography ioc network intelligence fingerprinting detection policy sandboxed lua command execution and a deep forensic suite process m...
PROCESS INJECTION DETECTION LLD
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...ent 1 add policy bands for remote-process verdicts 2 enable enforcement only in secure mode or explicit opt-in 3 keep allowlist support for enterprise compatibility tools phase 4 performance and quality hardening 1 sampling and rate limiting 2 baseline cache b...
Big-picture explanations, quick reference material, and definitive orientation docs.
...ollow the language s result err convention but like net_conn_read net_accept in secure_networking md a lua-level failure is reported inside the result hash not through err err the second return value only fires for problems outside the lua vm itself a bad argu...
Big-picture explanations, quick reference material, and definitive orientation docs.
... listeners serve loops websocket framing scanning and offline pcap analysis see secure_networking md secure_networking md builtin platforms description --- --- --- net_accept listener timeoutms all accepts one connection returns ok handle remote_addr timeout e...
